Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/32342e3135322e33302e302f32342d3234203d3e20323730353633.roa
File:                     32342e3135322e33302e302f32342d3234203d3e20323730353633.roa (raw, json)
Hash identifier:          HKzRlGyAiLA/p64j0kxPU1l+/dBJlzmZ/Bm8ZPxp1oM=
Subject key identifier:   BF:EE:1C:0D:24:37:3B:4E:9C:81:C1:8D:4D:17:A1:2C:31:47:D5:06
Certificate issuer:       /CN=07C21A839CF367647F65D6BDD7BE866D56276D73
Certificate serial:       06FE09CF839D25C8AA34BB2F8F535FBAB5F2529D
Authority key identifier: 07:C2:1A:83:9C:F3:67:64:7F:65:D6:BD:D7:BE:86:6D:56:27:6D:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07C21A839CF367647F65D6BDD7BE866D56276D73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/32342e3135322e33302e302f32342d3234203d3e20323730353633.roa
Signing time:             Wed 29 Jul 2026 14:20:48 +0000
ROA not before:           Wed 29 Jul 2026 14:15:48 +0000
ROA not after:            Wed 28 Jul 2027 14:20:48 +0000
asID:                     270563
IP address blocks:        24.152.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/07C21A839CF367647F65D6BDD7BE866D56276D73.crl
                          rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/07C21A839CF367647F65D6BDD7BE866D56276D73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07C21A839CF367647F65D6BDD7BE866D56276D73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fe:09:cf:83:9d:25:c8:aa:34:bb:2f:8f:53:5f:ba:b5:f2:52:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07C21A839CF367647F65D6BDD7BE866D56276D73
        Validity
            Not Before: Jul 29 14:15:48 2026 GMT
            Not After : Jul 28 14:20:48 2027 GMT
        Subject: CN=BFEE1C0D24373B4E9C81C18D4D17A12C3147D506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7f:44:93:4a:58:fb:b4:c4:d2:c0:bb:74:6d:
                    75:f1:db:47:25:a3:0d:c5:0b:84:1d:f7:63:0e:24:
                    90:fe:56:f3:6c:63:ca:2e:52:fc:e6:e3:3b:4b:a1:
                    89:ff:8d:46:cb:cc:07:22:ba:fb:60:2e:b0:11:53:
                    1f:1c:bb:a1:60:68:80:04:94:37:8f:12:8a:1b:06:
                    88:9c:cd:a1:e2:54:77:26:93:a2:a3:ed:53:94:b0:
                    8c:00:9a:ff:0b:72:5c:a3:67:95:57:05:a2:18:34:
                    d1:1c:45:6a:3e:6e:b4:a1:a2:2c:bb:a2:08:89:36:
                    f0:0c:35:27:72:be:3e:32:8a:1b:44:82:ef:ac:48:
                    8e:31:87:86:c4:19:a3:a8:b3:5e:24:3f:7e:94:20:
                    63:45:77:74:0a:55:49:75:ca:cc:03:cd:78:32:c7:
                    34:27:83:4b:f1:69:41:c4:28:6d:61:60:b1:c7:e2:
                    37:59:55:09:56:43:d9:a8:20:da:c4:9e:6e:06:ce:
                    48:79:e8:1b:3f:44:f4:d4:34:75:54:b0:ab:f0:e7:
                    a4:9b:73:17:28:26:2b:61:33:09:b4:27:08:50:17:
                    6c:5b:1b:ad:50:14:61:26:c3:21:22:e3:f2:e4:45:
                    17:d1:03:88:55:6b:c9:87:1b:e0:f4:27:35:fb:78:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EE:1C:0D:24:37:3B:4E:9C:81:C1:8D:4D:17:A1:2C:31:47:D5:06
            X509v3 Authority Key Identifier:
                keyid:07:C2:1A:83:9C:F3:67:64:7F:65:D6:BD:D7:BE:86:6D:56:27:6D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/07C21A839CF367647F65D6BDD7BE866D56276D73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07C21A839CF367647F65D6BDD7BE866D56276D73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/32342e3135322e33302e302f32342d3234203d3e20323730353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:0f:2a:d1:ee:2a:17:28:95:bc:18:ae:2c:1d:b3:5a:86:46:
         79:38:dd:fe:13:82:ee:3a:19:8a:61:d0:f6:6e:a4:ce:66:0c:
         86:bf:0d:93:38:2c:bc:a8:05:06:9f:56:22:5b:83:9f:83:b8:
         47:8d:c9:b0:5f:42:86:43:53:b5:85:c7:e8:a3:ef:ff:dc:5c:
         c8:18:8a:5a:d3:3e:0d:b3:03:51:0d:84:8c:c4:db:82:b2:10:
         4c:d4:a9:ab:8b:37:88:da:b3:03:62:58:d8:83:b3:da:3f:33:
         45:50:eb:e1:18:d6:33:0c:e9:d5:f8:60:08:cb:21:fb:65:6e:
         cc:60:49:94:e9:fd:6f:61:6e:5d:14:d1:bc:12:b1:01:ae:4b:
         03:a2:52:b7:40:6a:77:a6:4e:ee:cc:64:c6:f6:1f:b8:9e:23:
         3d:66:dd:75:56:09:80:e3:c3:5e:6f:9a:a7:bd:02:f2:d2:14:
         a8:99:fe:78:1d:06:a7:46:17:46:b7:12:0a:a8:3c:08:18:f3:
         53:7a:02:80:bb:e5:05:f2:47:9f:1b:59:c1:86:6c:4f:54:c0:
         f6:9f:e4:a6:b8:b7:86:40:18:8a:cb:9e:57:86:7c:5b:b6:ac:
         23:7a:f0:1d:2d:ec:3c:ee:97:43:c0:e0:2a:7b:18:7a:60:10:
         a2:6e:16:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:13:31 2026 by rpki-client